Re: [sleuthkit-users] What if a module fails to initialize
Brought to you by:
carrier
From: Willi B. <wil...@gm...> - 2013-10-07 18:15:58
|
Perhaps I've missed a menu item, but I don't remember seeing a way to re-run the ingest process on a given case. Assuming that's true, I would prefer to bail at the first opportunity. If I'm using Autopsy during an investigation with a set of plugins, I've decided to use them for a specific reason (otherwise they'd be disabled for better performance). Therefore, if I spend a while waiting for processing to complete, only to learn its in fact incomplete and the only way to finish is to re-ingest, I'd be annoyed. If there is a way to re-ingest a case, then a large warning dialog with a quick fix/reconfigure button would be my second choice. Willi On Mon, Oct 7, 2013 at 1:44 PM, Alex Nelson <ajn...@cs...> wrote: > I vote 1, because one faulty module should not prevent the other modules' > results, which may take a long time, from doing their work. (Please > believe me that this is not commentary on other current events.) > > However, this requires the module framework have support for a results > dependency graph. This'll take some intelligent designer's time to get > across gracefully to the end user if one module among many fails. (I can > say from experience that Make and Dot/GraphViz are not a simple solution.) > > How do later modules in a pipeline specify that they need the results of > an earlier module? > > --Alex > > > On Oct 7, 2013, at 13:26 , Nanni Bassetti <dig...@gm...> wrote: > > My vote is for the number 2 :-) > bye > -- > Dr. Nanni Bassetti > http://www.nannibassetti.com > CAINE project manager - http://www.caine-live.net > ------------------------------------------------------------------------------ > October Webinars: Code for Performance > Free Intel webinars can help you accelerate application performance. > Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most > from > the latest Intel processors and coprocessors. See abstracts and register > > > http://pubads.g.doubleclick.net/gampad/clk?id=60134791&iu=/4140/ostg.clktrk_______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org > > > > > ------------------------------------------------------------------------------ > October Webinars: Code for Performance > Free Intel webinars can help you accelerate application performance. > Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most > from > the latest Intel processors and coprocessors. See abstracts and register > > http://pubads.g.doubleclick.net/gampad/clk?id=60134071&iu=/4140/ostg.clktrk > _______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org > > |